← Back to Mealzy

Privacy Policy

Last updated: June 2026

Mealzy is built by a solo founder. This policy explains plainly what data we collect, how it is used, and what your rights are.

What data we collect

• Your name and email address when you create an account
• Your dietary profile: goals, calorie targets, allergies, dietary preferences, budget, and cooking preferences
• Meal plans you generate and save
• Basic usage events (e.g. page views, plan generations) for analytics — stored in our database, not shared with third parties
• A truncated, partial IP address (the last 8 characters only) logged against page views, demo plan generations, free-limit events, and referral visits. This is kept for abuse prevention and basic analytics — we do not retain your full IP address, and it is not used to identify individuals.

How we use your data

• To generate personalised meal plans using the AI model described below
• To maintain your account and remember your preferences
• To send you transactional emails (password reset, plan reminders) if you opt in
• To improve the product based on aggregated, anonymous usage patterns
• To enforce the free-plan limit of 3 meal plans per 30 days (Pro accounts have no limit)

Anthropic Claude API

When you generate a meal plan, your dietary profile (goals, calorie targets, allergies, preferences) is sent to Anthropic's Claude API to produce the plan. We do not send your name or email to Anthropic. Anthropic's use of API data is governed by their privacy policy. Anthropic does not use API inputs to train their models by default.

Stripe

Payments are processed by Stripe. When you upgrade to Pro, your payment details go directly to Stripe — Mealzy never sees or stores your card number. Stripe's privacy policy is available at stripe.com/privacy.

Cookies & analytics

We use one httpOnly cookie to keep you signed in (a JWT session token). No tracking cookies are set until you accept analytics in the cookie banner. Once accepted, we load Google Analytics to help us understand how Mealzy is used and improve the product. It does not receive your dietary profile or meal plan content.

Hosting & infrastructure

Mealzy's application server is hosted on Render, in Render's default US data center (Oregon, USA) unless we've configured otherwise. Our database runs on Turso (libSQL), hosted on AWS in the eu-west-1 region (Ireland). If you are in the EEA/UK, this means your account and profile data are stored in the EU, while application processing and logs may pass through US infrastructure; see Render's privacy policy and Turso's privacy policy for details on their respective safeguards.

Data retention

Your data is stored in our database for as long as your account is active. We do not sell, rent, or share your personal data with any third parties for marketing purposes.

Deleting your account

You can request full deletion of your account and all associated data by emailing support@mealzy.org. We will delete your data within 30 days of receiving your request.

Contact

Questions about this policy? Email support@mealzy.org.